Privacy Policy

Sebastian's Restoration Therapy (https://sebastiansrestorationtherapy.com) is operated by Sebastian Teh, a natural health educator and lifestyle medicine practitioner based in Malaysia, who also teaches and practises in the United States, United Kingdom, and European Union. References to “we”, “us”, or “our” in this policy refer to Sebastian Teh trading as Sebastian's Restoration Therapy.

Questions about this policy may be sent to sebastian@sebastiansrestorationtherapy.com.

We collect information in the following ways:

• Consultation bookings — name, email address, phone number, preferred date/time, and any health concerns you voluntarily share in the booking form.
• Course waitlist — name and email address.
• Event registrations — name, email address, and any details you include in the registration form.
• Contact form — name, email address, and the content of your message.
• Usage data — pages visited, browser type, and device information collected automatically by our hosting provider.

We use the information collected to:

• Confirm and manage consultation appointments.
• Send booking confirmations, reminders, and calendar invitations.
• Notify you when the online course or future events become available.
• Respond to enquiries you send via the contact form.
• Improve the website and its content.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Because Sebastian Teh works with clients and participants across Malaysia, the European Union, the United Kingdom, and the United States, multiple data-protection frameworks may apply to how we handle your information.

Where applicable law (including EU GDPR, UK GDPR, and Malaysia's Personal Data Protection Act 2010) requires a lawful basis, we rely on:

• Contract performance — to process bookings and deliver services you have requested.
• Legitimate interests — to improve our website and communicate about services relevant to your enquiry, where those interests are not overridden by your rights.
• Consent — where you have opted in to communications, such as the course waitlist. You may withdraw consent at any time by emailing us.

EU / UK residents: You have the right to lodge a complaint with your national data-protection authority (e.g. your EU Member State's supervisory authority or the UK Information Commissioner's Office).

This website uses only essential cookies required for the site to function (e.g. session management). We do not currently use analytics cookies or third-party advertising trackers. If this changes, this policy will be updated and a cookie consent banner will be displayed.

We share your data only with service providers necessary to operate the website:

• MailerSend — transactional email delivery (booking confirmations, notifications).
• Hosting provider — server infrastructure for the website and database.

Each provider is bound by their own privacy policy and, where required, a data-processing agreement. We do not share your data with any other third party unless required by law.

International transfers: Some providers may process data outside your country of residence. Where required by GDPR or UK GDPR, transfers are protected by appropriate safeguards (e.g. Standard Contractual Clauses or an adequacy decision).

We retain booking and contact records for up to 3 years after your last interaction with us, or as required by applicable law. You may request earlier deletion at any time (see Section 9).

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. Data is stored in an encrypted-at-rest database on secured servers. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure (“right to be forgotten”).
• Restrict or object to processing based on legitimate interests.
• Receive your data in a portable, machine-readable format (data portability).
• Withdraw consent at any time (where processing is consent-based), without affecting the lawfulness of prior processing.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at sebastian@sebastiansrestorationtherapy.com. We will respond within 30 days (or within the timeframe required by your local law).

Our services are not directed at children under 13 (or under 16 where required by applicable law). We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of the website after changes are posted constitutes acceptance of the revised policy.